Polski

Privacy policy

Updated

§ 1. General provisions

  1. This privacy policy (the "Policy") sets out the rules for processing the personal data of persons using the website available at jchs.software (the "Website") and the rules for using cookies and browser storage on the Website.
  2. The Policy fulfils the information obligation referred to in Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the "GDPR").

§ 2. Data controller

  1. The controller of personal data is Dominik Drozd, conducting business activity under the business name JCHS Software Dominik Drozd, ul. Ogrodowa 15, 38-423 Łężany, Poland, tax identification number (NIP) 6751791258 (the "Controller").
  2. In all matters concerning the processing of personal data the Controller may be contacted by email at dominik@jchs.software.
  1. The Controller processes personal data for the following purposes:
    • keeping visit statistics – on the basis of the data subject's consent (Article 6(1)(a) GDPR);
    • ensuring the security of the Website and diagnosing errors – on the basis of the Controller's legitimate interest (Article 6(1)(f) GDPR);
    • handling correspondence – on the basis of the Controller's legitimate interest in replying to a message received (Article 6(1)(f) GDPR).
  2. To keep visit statistics the Controller uses Google Analytics 4, which records: the pages and sections of the Website that are opened, the country, the type of device, the source of the visit, downloads of the CV, clicks on links leading outside the Website, and the following events: opening the terminal, opening the CV and the rubber duck exploding in the 3D scene. Without consent Google Analytics is not loaded.
  3. The server logs record: the IP address, the date and time of the request, the address of the requested page and the browser identifier.
  4. In the case of correspondence, the sender's email address and the content of the message are processed, solely in order to reply.
  5. Providing personal data is voluntary.
  6. The Controller does not make decisions based solely on automated processing, including profiling, as referred to in Article 22 GDPR.

§ 4. Cookies and browser storage

  1. The Website stores on the terminal device of a person using the Website only the information listed in the table below:
Name Stored in Purpose Period Consent
_ga, _ga_5SGFB33EZ5 cookie visit statistics (Google Analytics) 180 days required
consent browser storage remembering the decision on cookies 180 days not required (necessary)
theme browser storage remembering the chosen theme, light or dark until the Website's data is cleared from the browser not required (user setting)
duck-sound browser storage remembering whether sound is on or off until the Website's data is cleared from the browser not required (user setting)
  1. Google Analytics cookies are stored only after consent has been given, in accordance with Article 399 of the Polish Act of 12 July 2024 – Electronic Communications Law.
  2. Consent may be withdrawn, and an earlier decision changed, at any time using the button below, which is also available in the menu of the home page and in the footer of the other pages of the Website:

  1. Where consent is refused or withdrawn, the Website removes the Google Analytics cookies.

§ 5. Recipients of data and transfers to third countries

  1. The recipients of personal data are:
    • Google Ireland Limited – the provider of Google Analytics; statistical data may be stored on servers in the United States, and Google LLC participates in the EU–U.S. Data Privacy Framework;
    • Cloudflare, Inc. – an entity from the United States that carries network traffic between the user and the server and processes IP addresses in doing so, participating in the EU–U.S. Data Privacy Framework;
    • Proton AG – an entity from Switzerland that operates the Controller's mailbox and stores the correspondence addressed to the Controller.
  2. Personal data are transferred to the United States and to Switzerland on the basis of decisions of the European Commission finding an adequate level of protection (Article 45 GDPR).
  3. The Controller does not sell personal data and does not use them for advertising purposes.

§ 6. Retention periods

The Controller stores personal data for the following periods:

  • statistical data in Google Analytics: 2 months;
  • server logs: 10 days;
  • correspondence: until the matter it concerns is closed.

§ 7. Rights of data subjects

  1. A data subject has the right to:
    • access the data and obtain a copy of them (Article 15 GDPR);
    • rectification of the data (Article 16 GDPR);
    • erasure of the data (Article 17 GDPR);
    • restriction of processing (Article 18 GDPR);
    • data portability (Article 20 GDPR);
    • object to processing based on the Controller's legitimate interest (Article 21 GDPR).
  2. Consent to processing for statistical purposes may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal (Article 7(3) GDPR).
  3. To exercise these rights, contact the Controller at the address given in § 2(2).
  4. A data subject has the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).

§ 8. Final provisions

  1. The Controller may amend the Policy, in particular where the law or the way the Website works changes.
  2. The current wording of the Policy, together with the date of the last amendment, is always available at jchs.software/privacy.